IBM Db2 Mirror for i 7.4-7.6 RCE via External File Path
CVE-2026-17184 Published on August 14, 2026
IBM Db2 Mirror for i is affected by multiple vulnerabilities
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary code due to external control of file name or path.
Vulnerability Analysis
CVE-2026-17184 is exploitable with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be critical as this vulnerability has a high impact to the confidentiality, integrity and availability of this component.
Weakness Type
External Control of File Name or Path
The software allows user input to control or influence paths or file names that are used in filesystem operations.
Products Associated with CVE-2026-17184
Want to know whenever a new CVE is published for IBM Db2 Mirror For I? stack.watch will email you.
Affected Versions
IBM Db2 Mirror for i:- Version 7.4 is affected.
- Version 7.5 is affected.
- Version 7.6 is affected.